PHPackages axiorank/typo3-agent-verification - PHPackages - PHPackages [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register) 1. [Directory](/) 2. / 3. [Security](/categories/security) 4. / 5. axiorank/typo3-agent-verification ActiveTypo3-cms-extension[Security](/categories/security) axiorank/typo3-agent-verification ================================= Verify the AI agents that reach your TYPO3 site's login, backend, JSON endpoints, search, and forms. A thin client of the AxioRank inbound verify endpoint, with monitor and enforce modes, dashboard widgets, and in-backend agent policy management. 1.0.0(1mo ago)00GPL-2.0-or-laterPHPPHP ^8.2 Since Jul 13Pushed 1mo agoCompare [ Source](https://github.com/AxioRank/typo3-agent-verification)[ Packagist](https://packagist.org/packages/axiorank/typo3-agent-verification)[ Docs](https://axiorank.com/inbound-verification/typo3)[ RSS](/packages/axiorank-typo3-agent-verification/feed)WikiDiscussions main Synced 1w ago READMEChangelogDependencies (8)Versions (2)Used By (0) AxioRank Agent Verification =========================== [](#axiorank-agent-verification) Verify the AI agents that reach your TYPO3 site, and enforce the AxioRank verdict inline. Extension key:`axiorank`Composer:`axiorank/typo3-agent-verification`TYPO3:13.4 LTSLicense:GPL-2.0-or-laterDocs:What it is ---------- [](#what-it-is) AI agents now log in, call JSON endpoints, search, and submit forms on TYPO3 sites. This extension registers your site as a `website` inbound surface in AxioRank and, for each request worth checking, sends one authenticated `POST /api/gateway/verify-request` and acts on the verdict. It is a thin client: there is no local model and no bundled SDK. The identity check (Web Bot Auth signatures, the known-agent directory, risk scoring) happens in AxioRank. Because the guard is a PSR-15 middleware in your own request path, it can block an unverified agent in real time, not after the fact. Features -------- [](#features) - PSR-15 middleware on the frontend and backend request stacks. - Monitor first, then enforce. Enforcement acts only when your AxioRank surface is also enforcing, so a single flag cannot cause an accidental outage. - Fail-open by design. A verification timeout or outage never blocks a request. - Effective settings resolve from the environment constant, then per-site configuration, then the global extension configuration. - A backend module with a connection status, lifetime activity, recent verdicts, and a Test connection button. - An in-backend Agents module to manage allow, challenge, and block rules and to flip monitor and enforce, using a management-scoped site key. - Dashboard widgets (agents verified, agents blocked, recent agents) and a Reports status entry. - Console commands `axiorank:selftest` and `axiorank:prune`, both schedulable. - A `` Fluid view helper for a "Protected by AxioRank" trust badge. - English and German backend labels. Install ------- [](#install) ``` composer require axiorank/typo3-agent-verification ``` Then register a `website` surface in AxioRank, copy its site key (`axr_site_...`), and set it in one of: - the `AXIORANK_SITE_KEY` environment constant (recommended, keeps the key out of the database), - a per-site value in the Sites module, or - the global extension configuration under Admin Tools, Settings. Open the AxioRank backend module and press Test connection. Leave the mode on Monitor until you have watched the verdicts, then switch to Enforce. What gets verified ------------------ [](#what-gets-verified) Only the traffic worth checking, so ordinary human page views never call out: - any request carrying Web Bot Auth signature material (always), - the backend and login, JSON page types, on-site search, and form submissions, each a toggle, and - any request whose user agent looks like a crawler or AI agent. Fully page-cached responses served before the middleware are not checked. That is by design: it protects the dynamic surface, which is where agent traffic and risk actually are. What is sent to AxioRank ------------------------ [](#what-is-sent-to-axiorank) For each checked request: the method, host, path, query, user agent, client IP, and the headers that carry the agent's signature. Cookies, the Authorization header, and other credentials are stripped before the request leaves your server. ### Health Score 37 — LowBetter than 81% of packages Maintenance90 Actively maintained with recent releases Popularity0 Limited adoption so far Community6 Small or concentrated contributor base Maturity46 Maturing project, gaining track record Bus Factor1 Top contributor holds 100% of commits — single point of failure How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window. **Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores. **Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement. **Maturity (30%)** — Project age, version count, PHP version support, and release stability. ### Release Activity Cadence Unknown Total 1 Last Release 49d ago ### Community Maintainers ![](https://avatars.githubusercontent.com/u/291487804?v=4)[AxioRank](/maintainers/axiorank)[@AxioRank](https://github.com/AxioRank) --- Top Contributors [![frostyhand](https://avatars.githubusercontent.com/u/18291758?v=4)](https://github.com/frostyhand "frostyhand (3 commits)") --- Tags ai-agentsbot-detectionsecuritytypo3typo3-cmstypo3-extensionweb-bot-authsecuritytypo3ai-agentsweb-bot-authbot verification ### Code Quality TestsPHPUnit Code StylePHP\_CodeSniffer ### Embed Badge ![Health badge](/badges/axiorank-typo3-agent-verification/health.svg) ``` [![Health](https://phpackages.com/badges/axiorank-typo3-agent-verification/health.svg)](https://phpackages.com/packages/axiorank-typo3-agent-verification) ``` ### Alternatives [friendsoftypo3/content-blocks TYPO3 CMS Content Blocks - Content Types API | Define reusable components via YAML 103629.7k74](/packages/friendsoftypo3-content-blocks)[netresearch/rte-ckeditor-image Image support in CKEditor for the TYPO3 ecosystem - by Netresearch 631.1M8](/packages/netresearch-rte-ckeditor-image)[typo3/cms-adminpanel TYPO3 CMS Admin Panel - The Admin Panel displays information about your site in the frontend and contains a range of metrics including debug and caching information. 115.9M74](/packages/typo3-cms-adminpanel)[fluidtypo3/flux The flux package from FluidTYPO3 1501.0M25](/packages/fluidtypo3-flux)[pagemachine/typo3-formlog Form log for TYPO3 23247.0k8](/packages/pagemachine-typo3-formlog)[wazum/sluggi TYPO3 extension for URL slug management with inline editing, auto-sync, locking, access control, and redirects 40556.7k](/packages/wazum-sluggi) PHPackages © 2026 [Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)